12-06-2012 05:30 PM - edited 03-07-2019 10:26 AM
Hi Guys,
I'll admit im a cisco noobie, but i've been reading around and getting this to work is beyond my scope at this point. I have a issue where I cannot get my wireless clients WAN connectivty. I am not quite sure how to bridge the wireless side to the VLAN so I will post my configuration in order to see if someone can help me find a solution.
Cheers
Eric
KruseRouter#show running-config
Building configuration...
Current configuration : 3277 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname KruseRouter
!
boot-start-marker
boot-end-marker
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-653286079
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-653286079
revocation-check none
rsakeypair TP-self-signed-653286079
!
!
crypto pki certificate chain TP-self-signed-653286079
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 36353332 38363037 39301E17 0D313231 32303730 31303830
395A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3635 33323836
30373930 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
CA60A73F B76B7BDD 9B75364C 43E6E2BC 896F8FB6 5954248B AAE186FB E3D5C5BE
quit
dot11 syslog
!
dot11 ssid KRUSE
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 7 *************************************************
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.30
!
ip dhcp pool vlan1pool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 97.81.22.195
!
ip cef
!
archive
log config
hidekeys
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
broadcast-key vlan 1 change 30
!
!
ssid KRUSE
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet4
!
no ip http server
ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
scheduler max-task-time 5000
end
Solved! Go to Solution.
12-07-2012 12:56 AM
I have the same router with pretty much the same setup, I use bridge-group to brigde int Dot11Radio0.1 with Vlan1.
(..)
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
(..)
interface Vlan1
no ip address
bridge-group 1
Notably, i use int BVI1 as the management interface instead of int vlan1.
interface BVI1
ip address 192.168.205.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
12-06-2012 05:41 PM
I am also getting quite a bit of this in the stream
KruseRouter#
*Dec 7 01:30:26.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:30:56.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:31:26.763: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:31:56.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:32:26.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:32:56.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:33:26.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:33:56.759: *** Not encrypted dot1x packet from 0023.1568.ff64 has been discarded
*Dec 7 01:34:26
12-07-2012 12:56 AM
I have the same router with pretty much the same setup, I use bridge-group to brigde int Dot11Radio0.1 with Vlan1.
(..)
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
(..)
interface Vlan1
no ip address
bridge-group 1
Notably, i use int BVI1 as the management interface instead of int vlan1.
interface BVI1
ip address 192.168.205.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
12-07-2012 04:26 AM
I ended up finally getting it last night with that darn BVI interface. Bridged everything togother.
Appreciated.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide